@riddledc/riddle-proof-packs 0.2.0

package/package.json

@@ -0,0 +1,47 @@
+{
+  "name": "@riddledc/riddle-proof-packs",
+  "version": "0.2.0",
+  "description": "Reusable proof pack profiles and metadata helpers for the Riddle proof framework.",
+  "license": "MIT",
+  "author": "RiddleDC",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/riddledc/integrations",
+    "directory": "packages/riddle-proof-packs"
+  },
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    }
+  },
+  "files": [
+    "dist",
+    "packs",
+    "LICENSE",
+    "README.md"
+  ],
+  "sideEffects": false,
+  "engines": {
+    "node": ">=18"
+  },
+  "scripts": {
+    "build": "tsup src/index.ts --format cjs,esm --dts --out-dir dist --clean",
+    "clean": "rm -rf dist",
+    "lint": "echo 'lint: (not configured)'",
+    "test": "npm run build && node test.js"
+  },
+  "dependencies": {
+    "@riddledc/riddle-proof": "workspace:^"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "tsup": "^8.0.1",
+    "typescript": "^5.4.5"
+  }
+}

package/packs/auth-smoke/README.md

@@ -0,0 +1,21 @@
+# auth-smoke
+
+Auth Smoke proof pack profile. Include this profile JSON directly in any profile-mode execution path.
+
+## Proof claims and evidence roles
+
+- evidence_role: `current_target`
+- atomic claim
+- claim: The entry/home route is reachable and stable under a basic smoke configuration.
+  - target: `/` on the configured target URL.
+  - setup/actions: minimal route wait and baseline setup to capture DOM and viewport evidence.
+  - evidence: route/text assertions plus `body`, overflow, and no-fatal console checks.
+  - verdict: pass only if the smoke targets are visible and no high-risk runtime faults are observed.
+- does not prove
+  - actual identity auth success or login edge cases.
+  - permissions, role-based UI behavior, or backend authorization guarantees.
+  - protected workflow outcomes across multiple auth providers.
+
+## Usage
+
+Load the profile JSON from `profile.json` and supply it to profile mode or a local runner input file.

package/packs/auth-smoke/profile.json

@@ -0,0 +1,65 @@
+{
+  "version": "riddle-proof.profile.v1",
+  "name": "auth-smoke",
+  "target": {
+    "route": "/",
+    "viewports": [
+      {
+        "name": "mobile",
+        "width": 390,
+        "height": 844
+      },
+      {
+        "name": "desktop",
+        "width": 1440,
+        "height": 1000
+      }
+    ],
+    "auth": "none",
+    "wait_for_selector": "body",
+    "setup_actions": [
+      {
+        "type": "wait",
+        "ms": 250
+      }
+    ]
+  },
+  "checks": [
+    {
+      "type": "selector_visible",
+      "selector": "body"
+    },
+    {
+      "type": "text_visible",
+      "text": "Example"
+    },
+    {
+      "type": "no_mobile_horizontal_overflow"
+    },
+    {
+      "type": "no_fatal_console_errors"
+    }
+  ],
+  "artifacts": [
+    "screenshot",
+    "console",
+    "dom_summary",
+    "proof_json"
+  ],
+  "failure_policy": {
+    "environment_blocked": "neutral",
+    "proof_insufficient": "review",
+    "product_regression": "fail"
+  },
+  "metadata": {
+    "pack_id": "auth_smoke",
+    "pack_public_name": "Auth Smoke Pack",
+    "purpose": "Template for baseline page smoke checks where the entry route is publicly reachable.",
+    "required_receipts": [
+      "entry/home route is reachable",
+      "visible route baseline content",
+      "overflow and console noise are clean",
+      "no-console-error baseline"
+    ]
+  }
+}

package/packs/canvas-gameplay/README.md

@@ -0,0 +1,21 @@
+# canvas-gameplay
+
+Canvas Gameplay proof pack profile. Include this profile JSON directly in any profile-mode execution path.
+
+## Proof claims and evidence roles
+
+- evidence_role: `interaction_snapshots`
+- atomic claim
+  - claim: gameplay route can be entered, controlled, and rendered through a canvas while remaining stable.
+  - target: `/games/example` gameplay route.
+  - setup/actions: clear storage, wait for game canvas, install game proof reader, inject a few input actions, and capture pre-action and post-action proof states.
+  - evidence: canvas signatures, in-run window values, screenshots, route/visibility checks, and clean console.
+  - verdict: pass when movement/interaction and runtime state progress are observed without errors.
+- does not prove
+  - long-game correctness, scoring fairness, or anti-cheat outcomes.
+  - cross-device gameplay parity beyond the exercised viewport set.
+  - backend game logic correctness independent of UI rendering.
+
+## Usage
+
+Load the profile JSON from `profile.json` and supply it to profile mode or a local runner input file.

package/packs/canvas-gameplay/profile.json

@@ -0,0 +1,225 @@
+{
+  "version": "riddle-proof.profile.v1",
+  "name": "canvas-gameplay",
+  "target": {
+    "route": "/",
+    "viewports": [
+      {
+        "name": "mobile",
+        "width": 390,
+        "height": 844
+      },
+      {
+        "name": "tablet",
+        "width": 820,
+        "height": 1180
+      },
+      {
+        "name": "desktop",
+        "width": 1440,
+        "height": 1000
+      }
+    ],
+    "timeout_sec": 300,
+    "wait_for_selector": "#game-root canvas",
+    "screenshot_mode": "viewport",
+    "setup_actions": [
+      {
+        "type": "clear_storage",
+        "storage": "both",
+        "reload": true
+      },
+      {
+        "type": "wait_for_selector",
+        "selector": "#game-root",
+        "timeout_ms": 20000
+      },
+      {
+        "type": "wait_for_selector",
+        "selector": "#game-root canvas",
+        "timeout_ms": 20000
+      },
+      {
+        "type": "window_eval",
+        "label": "install-gameplay-proof-reader",
+        "timeout_ms": 10000,
+        "store_return_to": "__gameplayProof.ready",
+        "script": "window.__riddleGameplayStep=()=>{const api=window.__exampleGameProof;const state=api?.step?.()||api?.read?.()||{};const out={ready:state.ready===true,inputAccepted:state.inputAccepted===true,gameOver:state.gameOver===true,distance:Number(state.distance||0),score:Number(state.score||0),level:Number(state.level||0)};out.ok=out.ready&&out.inputAccepted&&out.gameOver===false&&out.distance>=2&&out.score>=10;window.__gameplayProof={...(window.__gameplayProof||{}),running:out};return out;};const api=window.__exampleGameProof;const initial=api?.read?.()||{};const out={ready:initial.ready===true,inputAccepted:initial.inputAccepted===true,gameOver:initial.gameOver===true,distance:Number(initial.distance||0),score:Number(initial.score||0),level:Number(initial.level||0)};window.__gameplayProof={...(window.__gameplayProof||{}),ready:out};return out;",
+        "return_summary_fields": [
+          {
+            "path": "ready"
+          },
+          {
+            "path": "inputAccepted"
+          },
+          {
+            "path": "distance"
+          },
+          {
+            "path": "score"
+          },
+          {
+            "path": "gameOver"
+          }
+        ]
+      },
+      {
+        "type": "assert_window_value",
+        "path": "__gameplayProof.ready.ready",
+        "expected": true,
+        "timeout_ms": 10000
+      },
+      {
+        "type": "canvas_signature",
+        "selector": "#game-root canvas",
+        "label": "ready",
+        "store_signature_to": "__gameplayProof.readyCanvas",
+        "timeout_ms": 10000
+      },
+      {
+        "type": "screenshot",
+        "label": "ready",
+        "mode": "viewport"
+      },
+      {
+        "type": "press",
+        "key": "Space",
+        "after_ms": 120
+      },
+      {
+        "type": "press",
+        "key": "ArrowRight",
+        "after_ms": 120
+      },
+      {
+        "type": "window_call_until",
+        "path": "__riddleGameplayStep",
+        "until_path": "__gameplayProof.running.ok",
+        "until_expected_value": true,
+        "max_calls": 36,
+        "interval_ms": 250,
+        "timeout_ms": 15000
+      },
+      {
+        "type": "window_eval",
+        "label": "capture-running-proof",
+        "timeout_ms": 10000,
+        "store_return_to": "__gameplayProof.running",
+        "script": "return window.__riddleGameplayStep?.()||{};",
+        "return_summary_fields": [
+          {
+            "path": "ok"
+          },
+          {
+            "path": "distance"
+          },
+          {
+            "path": "score"
+          },
+          {
+            "path": "inputAccepted"
+          },
+          {
+            "path": "gameOver"
+          }
+        ]
+      },
+      {
+        "type": "assert_window_value",
+        "path": "__gameplayProof.running.ok",
+        "expected": true,
+        "timeout_ms": 10000
+      },
+      {
+        "type": "assert_window_value",
+        "path": "__gameplayProof.running.gameOver",
+        "expected": false,
+        "timeout_ms": 10000
+      },
+      {
+        "type": "assert_window_number",
+        "path": "__gameplayProof.running.distance",
+        "min_value": 2,
+        "timeout_ms": 10000
+      },
+      {
+        "type": "assert_window_number",
+        "path": "__gameplayProof.running.score",
+        "min_value": 10,
+        "timeout_ms": 10000
+      },
+      {
+        "type": "canvas_signature",
+        "selector": "#game-root canvas",
+        "label": "running",
+        "store_signature_to": "__gameplayProof.runningCanvas",
+        "timeout_ms": 10000
+      },
+      {
+        "type": "screenshot",
+        "label": "running",
+        "mode": "viewport"
+      }
+    ]
+  },
+  "checks": [
+    {
+      "type": "route_loaded",
+      "expected_path": "/games/example"
+    },
+    {
+      "type": "selector_visible",
+      "selector": "#game-root"
+    },
+    {
+      "type": "selector_visible",
+      "selector": "#game-root canvas"
+    },
+    {
+      "type": "selector_count_equals",
+      "selector": "#game-root canvas",
+      "expected_count": 1
+    },
+    {
+      "type": "text_absent",
+      "pattern": "\\bNaN\\b"
+    },
+    {
+      "type": "text_absent",
+      "pattern": "undefined",
+      "flags": "i"
+    },
+    {
+      "type": "no_horizontal_overflow",
+      "max_overflow_px": 1
+    },
+    {
+      "type": "no_fatal_console_errors"
+    },
+    {
+      "type": "no_console_warnings"
+    }
+  ],
+  "artifacts": [
+    "screenshot",
+    "console",
+    "dom_summary",
+    "proof_json"
+  ],
+  "baseline_policy": "invariant_only",
+  "failure_policy": {
+    "environment_blocked": "neutral",
+    "proof_insufficient": "fail",
+    "product_regression": "fail"
+  },
+  "metadata": {
+    "purpose": "Template for gameplay routes where gameplay evidence is primarily rendered through canvas.",
+    "pack_id": "canvas_gameplay",
+    "pack_public_name": "Canvas Gameplay Pack",
+    "required_receipts": [
+      "canvas mount and signature capture",
+      "route loaded on gameplay path",
+      "non-fatal browser evidence"
+    ]
+  }
+}

package/packs/gameplay-window-call-until/README.md

@@ -0,0 +1,21 @@
+# gameplay-window-call-until
+
+Gameplay Window Call Until proof pack profile. Include this profile JSON directly in any profile-mode execution path.
+
+## Proof claims and evidence roles
+
+- evidence_role: `interaction_snapshots`
+- atomic claim
+  - claim: gameplay runtime responds to input and can be proven with pre-action and post-action checkpoints.
+  - target: `/games/example` gameplay route.
+  - setup/actions: initialize and wait for readiness, capture ready state, then perform input actions and poll for progressing game state.
+  - evidence: canvas signatures, route/load checks, state assertions (`window_call_until` progression), and clean console.
+  - verdict: pass when expected in-run game state transitions are observed before the timeout window.
+- does not prove
+  - deterministic behavior across all user inputs.
+  - success conditions outside the targeted route.
+  - full game logic correctness or backend matchmaking integrity.
+
+## Usage
+
+Load the profile JSON from `profile.json` and supply it to profile mode or a local runner input file.

package/packs/gameplay-window-call-until/profile.json

@@ -0,0 +1,101 @@
+{
+  "version": "riddle-proof.profile.v1",
+  "name": "gameplay-window-call-until",
+  "target": {
+    "route": "/games/example",
+    "viewports": [
+      { "name": "mobile", "width": 390, "height": 844 },
+      { "name": "tablet", "width": 820, "height": 1180 },
+      { "name": "desktop", "width": 1440, "height": 1000 }
+    ],
+    "timeout_sec": 300,
+    "wait_for_selector": "#game-root canvas",
+    "screenshot_mode": "viewport",
+    "setup_actions": [
+      { "type": "clear_storage", "storage": "both", "reload": true },
+      { "type": "wait_for_selector", "selector": "#game-root", "timeout_ms": 20000 },
+      { "type": "wait_for_selector", "selector": "#game-root canvas", "timeout_ms": 20000 },
+      {
+        "type": "window_eval",
+        "label": "install-gameplay-proof-reader",
+        "timeout_ms": 10000,
+        "store_return_to": "__gameplayProof.ready",
+        "script": "window.__riddleGameplayStep=()=>{const api=window.__exampleGameProof;const state=api?.step?.()||api?.read?.()||{};const out={ready:state.ready===true,inputAccepted:state.inputAccepted===true,gameOver:state.gameOver===true,distance:Number(state.distance||0),score:Number(state.score||0),level:Number(state.level||0)};out.ok=out.ready&&out.inputAccepted&&out.gameOver===false&&out.distance>=2&&out.score>=10;window.__gameplayProof={...(window.__gameplayProof||{}),running:out};return out;};const api=window.__exampleGameProof;const initial=api?.read?.()||{};const out={ready:initial.ready===true,inputAccepted:initial.inputAccepted===true,gameOver:initial.gameOver===true,distance:Number(initial.distance||0),score:Number(initial.score||0),level:Number(initial.level||0)};window.__gameplayProof={...(window.__gameplayProof||{}),ready:out};return out;",
+        "return_summary_fields": [
+          { "path": "ready" },
+          { "path": "inputAccepted" },
+          { "path": "distance" },
+          { "path": "score" },
+          { "path": "gameOver" }
+        ]
+      },
+      { "type": "assert_window_value", "path": "__gameplayProof.ready.ready", "expected": true, "timeout_ms": 10000 },
+      {
+        "type": "canvas_signature",
+        "selector": "#game-root canvas",
+        "label": "ready",
+        "store_signature_to": "__gameplayProof.readyCanvas",
+        "timeout_ms": 10000
+      },
+      { "type": "screenshot", "label": "ready", "mode": "viewport" },
+      { "type": "press", "key": "Space", "after_ms": 120 },
+      { "type": "press", "key": "ArrowRight", "after_ms": 120 },
+      {
+        "type": "window_call_until",
+        "path": "__riddleGameplayStep",
+        "until_path": "__gameplayProof.running.ok",
+        "until_expected_value": true,
+        "max_calls": 36,
+        "interval_ms": 250,
+        "timeout_ms": 15000
+      },
+      {
+        "type": "window_eval",
+        "label": "capture-running-proof",
+        "timeout_ms": 10000,
+        "store_return_to": "__gameplayProof.running",
+        "script": "return window.__riddleGameplayStep?.()||{};",
+        "return_summary_fields": [
+          { "path": "ok" },
+          { "path": "distance" },
+          { "path": "score" },
+          { "path": "inputAccepted" },
+          { "path": "gameOver" }
+        ]
+      },
+      { "type": "assert_window_value", "path": "__gameplayProof.running.ok", "expected": true, "timeout_ms": 10000 },
+      { "type": "assert_window_value", "path": "__gameplayProof.running.gameOver", "expected": false, "timeout_ms": 10000 },
+      { "type": "assert_window_number", "path": "__gameplayProof.running.distance", "min_value": 2, "timeout_ms": 10000 },
+      { "type": "assert_window_number", "path": "__gameplayProof.running.score", "min_value": 10, "timeout_ms": 10000 },
+      {
+        "type": "canvas_signature",
+        "selector": "#game-root canvas",
+        "label": "running",
+        "store_signature_to": "__gameplayProof.runningCanvas",
+        "timeout_ms": 10000
+      },
+      { "type": "screenshot", "label": "running", "mode": "viewport" }
+    ]
+  },
+  "checks": [
+    { "type": "route_loaded", "expected_path": "/games/example" },
+    { "type": "selector_visible", "selector": "#game-root" },
+    { "type": "selector_visible", "selector": "#game-root canvas" },
+    { "type": "selector_count_equals", "selector": "#game-root canvas", "expected_count": 1 },
+    { "type": "text_absent", "pattern": "\\bNaN\\b" },
+    { "type": "text_absent", "pattern": "undefined", "flags": "i" },
+    { "type": "no_horizontal_overflow", "max_overflow_px": 1 },
+    { "type": "no_fatal_console_errors" },
+    { "type": "no_console_warnings" }
+  ],
+  "artifacts": ["screenshot", "console", "dom_summary", "proof_json"],
+  "baseline_policy": "invariant_only",
+  "failure_policy": {
+    "environment_blocked": "neutral",
+    "proof_insufficient": "fail",
+    "product_regression": "fail"
+  },
+  "metadata": {
+    "purpose": "Template for gameplay profiles where a route exposes window.__exampleGameProof.read() and optionally step(). Use window_call_until to wait for runtime state such as accepted input, distance, score, or level completion instead of relying on fixed sleeps that vary across hosted browser frame cadence."
+  }
+}

package/packs/handled-recovery-action-malformed-success/README.md

@@ -0,0 +1,21 @@
+# handled-recovery-action-malformed-success
+
+Handled Recovery Action Malformed Success proof pack profile. Include this profile JSON directly in any profile-mode execution path.
+
+## Proof claims and evidence roles
+
+- evidence_role: `interaction_snapshots`
+- atomic claim
+  - claim: malformed action responses are handled without surfacing parsing/validation regressions in primary UI.
+  - target: `/account` account page with recovery-state controls.
+  - setup/actions: seed auth/state mocks, perform a malformed create action, capture pre-action and post-action snapshots.
+  - evidence: recovery message assertions, visible state retention checks, request-body capture, and clean console checks.
+  - verdict: pass when recovery UI appears, corrupted parser artifacts stay absent, and request intent is captured.
+- does not prove
+  - successful action creation path.
+  - behavior for other actions/endpoints in the same workflow.
+  - role-specific authorization or data persistence effects.
+
+## Usage
+
+Load the profile JSON from `profile.json` and supply it to profile mode or a local runner input file.

package/packs/handled-recovery-action-malformed-success/profile.json

@@ -0,0 +1,126 @@
+{
+  "version": "riddle-proof.profile.v1",
+  "name": "handled-recovery-action-malformed-success",
+  "target": {
+    "route": "/account",
+    "viewports": [
+      { "name": "mobile", "width": 390, "height": 844 },
+      { "name": "tablet", "width": 820, "height": 1180 },
+      { "name": "desktop", "width": 1440, "height": 1000 }
+    ],
+    "timeout_sec": 300,
+    "wait_ms": 800,
+    "network_mocks": [
+      {
+        "label": "account-summary",
+        "url": "**/api/account/summary",
+        "method": "GET",
+        "status": 200,
+        "content_type": "application/json",
+        "required_hit_count": 3,
+        "json": {
+          "available_time": "4h 0m",
+          "active_jobs": 2
+        }
+      },
+      {
+        "label": "recent-jobs",
+        "url": "**/api/jobs?limit=10",
+        "method": "GET",
+        "status": 200,
+        "content_type": "application/json",
+        "required_hit_count": 3,
+        "json": {
+          "jobs": [
+            {
+              "id": "job_action_template_survives",
+              "status": "completed"
+            }
+          ]
+        }
+      },
+      {
+        "label": "existing-api-keys",
+        "url": "**/api/api-keys",
+        "method": "GET",
+        "status": 200,
+        "content_type": "application/json",
+        "required_hit_count": 3,
+        "json": {
+          "keys": [
+            {
+              "id": "key_action_template_existing",
+              "name": "Existing action template key",
+              "last4": "0001",
+              "status": "active"
+            }
+          ]
+        }
+      },
+      {
+        "label": "create-api-key-malformed-success",
+        "url": "**/api/api-keys",
+        "method": "POST",
+        "status": 200,
+        "content_type": "application/json",
+        "required_hit_count": 3,
+        "max_hit_count": 3,
+        "capture_request_body": true,
+        "request_body_contains": ["Action template malformed success key"],
+        "body": "{not valid create success json"
+      }
+    ],
+    "setup_actions": [
+      { "type": "clear_storage", "storage": "both", "reload": true },
+      { "type": "wait_for_selector", "selector": "[data-testid='account-page']", "timeout_ms": 30000 },
+      { "type": "wait_for_text", "selector": "body", "text": "4h 0m", "timeout_ms": 30000 },
+      { "type": "wait_for_text", "selector": "body", "text": "job_action_template_survives", "timeout_ms": 30000 },
+      { "type": "wait_for_text", "selector": "body", "text": "Existing action template key", "timeout_ms": 30000 },
+      { "type": "fill", "selector": "[data-testid='new-key-name']", "value": "Action template malformed success key" },
+      { "type": "clear_console" },
+      { "type": "screenshot", "label": "before-malformed-success-action" },
+      { "type": "click", "selector": "[data-testid='create-key-button']", "text": "Create API key" },
+      { "type": "wait_for_text", "selector": "body", "text": "Failed to create API key", "timeout_ms": 30000 },
+      { "type": "assert_text_visible", "selector": "body", "text": "Existing action template key", "timeout_ms": 5000 },
+      { "type": "assert_text_visible", "selector": "body", "text": "Active", "timeout_ms": 5000 },
+      { "type": "assert_text_absent", "selector": "body", "text": "API Key Created!", "timeout_ms": 1000 },
+      { "type": "assert_text_absent", "selector": "body", "text": "Expected property name", "timeout_ms": 1000 },
+      { "type": "assert_text_absent", "selector": "body", "text": "SyntaxError", "timeout_ms": 1000 },
+      { "type": "assert_text_absent", "selector": "body", "text": "[object Object]", "timeout_ms": 1000 },
+      { "type": "screenshot", "label": "malformed-success-action-visible-recovery" }
+    ]
+  },
+  "checks": [
+    { "type": "route_loaded", "expected_path": "/account" },
+    { "type": "selector_visible", "selector": "[data-testid='account-page']" },
+    { "type": "selector_visible", "selector": "[data-testid='api-key-create-error']" },
+    { "type": "text_visible", "text": "4h 0m" },
+    { "type": "text_visible", "text": "2 active" },
+    { "type": "text_visible", "text": "job_action_template_survives" },
+    { "type": "text_visible", "text": "Existing action template key" },
+    { "type": "text_visible", "text": "Failed to create API key" },
+    { "type": "text_visible", "text": "Active" },
+    { "type": "text_absent", "text": "API Key Created!" },
+    { "type": "text_absent", "text": "Expected property name" },
+    { "type": "text_absent", "text": "SyntaxError" },
+    { "type": "text_absent", "text": "[object Object]" },
+    { "type": "text_absent", "text": "Application error" },
+    { "type": "selector_count_equals", "selector": "[data-testid='api-key-create-error']", "expected_count": 1 },
+    { "type": "selector_count_equals", "selector": "[data-testid='recent-job-row']", "expected_count": 1 },
+    { "type": "selector_count_equals", "selector": "[data-testid='api-key-row']", "expected_count": 1 },
+    { "type": "selector_count_equals", "selector": "[data-testid='created-key-modal']", "expected_count": 0 },
+    { "type": "no_horizontal_overflow", "max_overflow_px": 1 },
+    { "type": "no_fatal_console_errors" },
+    { "type": "no_console_warnings" }
+  ],
+  "artifacts": ["screenshot", "console", "dom_summary", "proof_json"],
+  "baseline_policy": "invariant_only",
+  "failure_policy": {
+    "environment_blocked": "neutral",
+    "proof_insufficient": "fail",
+    "product_regression": "fail"
+  },
+  "metadata": {
+    "purpose": "Template for handled malformed action-success recovery: prove surrounding state still renders, the failed action shows one recovery message, success UI and raw parser text stay absent, the action request body is captured, and browser console evidence remains clean."
+  }
+}